Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer
File:                     4817ebb3-a4cc-48a9-bf42-01de55a66def.cer (raw, json)
Hash identifier:          ZKPuoXwvPMk0ed6lNuNlM5DcT7SPY9PrUdUii65x2+0=
Subject key identifier:   93:D8:D7:6A:D4:0D:56:A6:A5:A7:DE:2D:7D:06:EE:D0:86:74:6B:EF
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584723FE36E8B09B273923D25740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 08 Sep 2024 00:45:27 +0000
Certificate not after:    Sat 12 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 55251
                          IP: 162.211.156.0/22
                          IP: 2620:2a:4000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:23:fe:36:e8:b0:9b:27:39:23:d2:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Sep  8 00:45:27 2024 GMT
            Not After : Dec 12 01:45:27 2026 GMT
        Subject: CN=4817ebb3-a4cc-48a9-bf42-01de55a66def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:48:5e:23:94:0c:72:40:82:c9:c4:45:d6:
                    f8:6e:62:e5:f6:d5:84:d7:54:48:3f:5f:31:7c:c5:
                    c8:7a:b8:ef:26:64:38:88:5d:76:b1:17:04:73:54:
                    d6:92:40:a0:bb:c5:99:5b:9a:07:d0:55:e4:f3:77:
                    f3:55:fb:34:6a:e2:e8:b9:8b:eb:95:c1:1b:47:75:
                    12:f4:a7:88:cb:6f:51:41:6c:a2:a6:54:76:6e:79:
                    bf:b6:df:e6:46:35:5f:1d:76:31:bb:ed:57:16:90:
                    eb:8d:57:95:5d:53:18:4d:0c:93:ee:41:f3:a2:b6:
                    39:cb:48:56:8e:44:d6:0f:c9:aa:4e:36:6f:ef:44:
                    6a:1e:2a:9e:f2:6a:4b:af:69:fa:fb:67:0d:40:e4:
                    b5:d4:76:d9:5b:9e:67:b1:f7:15:96:70:85:38:45:
                    64:b2:35:7e:e0:89:d4:03:08:91:b8:f4:2e:34:30:
                    82:ef:c7:1d:f9:0a:9e:8f:d0:38:71:93:2b:2e:e2:
                    00:24:89:4b:b3:11:86:7b:14:1a:41:2d:2a:7c:14:
                    31:25:33:35:ec:17:72:ab:5c:0a:c1:ba:8e:af:9b:
                    7f:c8:4d:ae:62:e5:99:46:31:84:79:16:58:93:8e:
                    5b:2f:a8:64:71:32:4f:ac:53:fb:ee:7d:2a:aa:3c:
                    37:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D8:D7:6A:D4:0D:56:A6:A5:A7:DE:2D:7D:06:EE:D0:86:74:6B:EF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.156.0/22
                IPv6:
                  2620:2a:4000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55251

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:7c:4d:c5:09:7a:e3:5a:a0:42:0c:21:19:b4:05:ea:f2:dd:
         97:1b:69:3c:e4:a0:02:bf:17:6b:45:bc:b8:5a:a2:e1:b9:d7:
         c3:b1:97:64:db:af:68:ec:76:1b:4a:77:a1:b7:4d:a8:9b:b4:
         e8:57:7d:bd:d4:9c:28:79:66:c4:a0:c8:b6:b5:87:86:1b:17:
         28:c0:3e:4a:c2:a9:88:eb:d9:1e:f3:22:1f:8b:88:24:38:e4:
         7d:16:58:ea:f2:fc:63:59:ba:c0:72:23:28:1b:7b:bd:e0:b6:
         4a:81:c2:58:13:da:ce:3f:46:c3:3e:ea:5a:b0:d0:69:ec:d4:
         90:3d:d0:b6:4d:d7:34:ca:1f:70:0c:a8:21:bb:87:9b:3f:bd:
         ca:e9:13:6c:e4:32:47:2b:63:2d:eb:df:28:96:36:04:07:e8:
         b8:85:02:59:99:8d:a4:dc:e3:38:14:d3:7f:f2:b0:69:34:e8:
         cf:4d:07:ee:b0:8f:26:b4:60:f2:14:04:59:f2:f2:d7:98:ad:
         ce:e9:58:98:de:b3:46:81:61:a2:1a:0b:52:7f:5c:b4:a1:2b:
         24:ab:80:20:98:03:3b:52:16:51:10:c7:5b:4d:2b:3c:1d:61:
         2f:a6:ab:d1:74:cf:15:84:47:31:06:99:4a:9d:e5:a8:b6:5c:
         4d:14:90:25
-----BEGIN CERTIFICATE-----
MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEcj/jbosJsnOSPSV0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI0MDkwODAwNDUyN1oXDTI2MTIxMjAxNDUyN1owLzEtMCsGA1UEAxMk
NDgxN2ViYjMtYTRjYy00OGE5LWJmNDItMDFkZTU1YTY2ZGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1hIXiOUDHJAgsnERdb4bmLl9tWE11RIP18x
fMXIerjvJmQ4iF12sRcEc1TWkkCgu8WZW5oH0FXk83fzVfs0auLouYvrlcEbR3US
9KeIy29RQWyiplR2bnm/tt/mRjVfHXYxu+1XFpDrjVeVXVMYTQyT7kHzorY5y0hW
jkTWD8mqTjZv70RqHiqe8mpLr2n6+2cNQOS11HbZW55nsfcVlnCFOEVksjV+4InU
AwiRuPQuNDCC78cd+Qqej9A4cZMrLuIAJIlLsxGGexQaQS0qfBQxJTM17Bdyq1wK
wbqOr5t/yE2uYuWZRjGEeRZYk45bL6hkcTJPrFP77n0qqjw3KQIDAQABo4IELDCC
BCgwHQYDVR0OBBYEFJPY12rUDVampafeLX0G7tCGdGvvMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80
ODE3ZWJiMy1hNGNjLTQ4YTktYmY0Mi0wMWRlNTVhNjZkZWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQ4MTdlYmIzLWE0Y2MtNDhhOS1i
ZjQyLTAxZGU1NWE2NmRlZi80ODE3ZWJiMy1hNGNjLTQ4YTktYmY0Mi0wMWRlNTVh
NjZkZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBAKi05wwDwQCAAIwCQMHBCYgACpAADAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMA19MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYHxNxQl641qgQgwhGbQF6vLd
lxtpPOSgAr8Xa0W8uFqi4bnXw7GXZNuvaOx2G0p3obdNqJu06Fd9vdScKHlmxKDI
trWHhhsXKMA+SsKpiOvZHvMiH4uIJDjkfRZY6vL8Y1m6wHIjKBt7veC2SoHCWBPa
zj9Gwz7qWrDQaezUkD3Qtk3XNMofcAyoIbuHmz+9yukTbOQyRytjLevfKJY2BAfo
uIUCWZmNpNzjOBTTf/KwaTToz00H7rCPJrRg8hQEWfLy15itzulYmN6zRoFhohoL
Un9ctKErJKuAIJgDO1IWURDHW00rPB1hL6ar0XTPFYRHMQaZSp3lqLZcTRSQJQ==
-----END CERTIFICATE-----